Skip to content

Bump the npm_and_yarn group across 10 directories with 8 updates - #5

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/build/agent-sdk/agents/claude/npm_and_yarn-81839c0d7c
Open

Bump the npm_and_yarn group across 10 directories with 8 updates#5
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/build/agent-sdk/agents/claude/npm_and_yarn-81839c0d7c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown

Bumps the npm_and_yarn group with 1 update in the /build/agent-sdk/agents/claude directory: @hono/node-server.
Bumps the npm_and_yarn group with 1 update in the /test/monaco directory: postcss.
Bumps the npm_and_yarn group with 1 update in the /test/mcp directory: @hono/node-server.
Bumps the npm_and_yarn group with 1 update in the /test/integration/browser directory: brace-expansion.
Bumps the npm_and_yarn group with 3 updates in the / directory: @anthropic-ai/sdk, @hono/node-server and braces.
Bumps the npm_and_yarn group with 1 update in the /extensions/copilot/test/simulation/fixtures/generate/issue-6163 directory: esbuild.
Bumps the npm_and_yarn group with 3 updates in the /extensions/copilot directory: @anthropic-ai/sdk, postcss and @opentelemetry/core.
Bumps the npm_and_yarn group with 2 updates in the /extensions/copilot/chat-lib directory: postcss and @opentelemetry/core.
Bumps the npm_and_yarn group with 1 update in the /build/vite directory: postcss.
Bumps the npm_and_yarn group with 2 updates in the /build/npm/gyp directory: ip-address and brace-expansion.

Updates @hono/node-server from 1.19.14 to 2.0.12

Release notes

Sourced from @​hono/node-server's releases.

v2.0.12

What's Changed

Full Changelog: honojs/node-server@v2.0.11...v2.0.12

v2.0.11

What's Changed

Full Changelog: honojs/node-server@v2.0.10...v2.0.11

v2.0.10

Security fixes

This release includes a fix for the following security issue:

Unauthenticated memory-leak DoS via aborted WebSocket handshake

Affects: upgradeWebSocket. A WebSocket upgrade request with a missing or malformed Sec-WebSocket-Key header leaked the request's IncomingMessage and left a promise pending, even though no connection was established. Since the route is reachable pre-handshake without authentication, an attacker could flood it to gradually exhaust memory. GHSA-9mqv-5hh9-4cgg

Users of upgradeWebSocket are encouraged to upgrade to this version.

v2.0.9

What's Changed

New Contributors

Full Changelog: honojs/node-server@v2.0.8...v2.0.9

v2.0.8

What's Changed

Full Changelog: honojs/node-server@v2.0.7...v2.0.8

v2.0.7

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​hono/node-server since your current version.


Updates postcss from 8.5.12 to 8.5.25

Release notes

Sourced from postcss's releases.

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.
Changelog

Sourced from postcss's changelog.

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

8.5.15

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.


Updates @hono/node-server from 1.19.14 to 2.0.12

Release notes

Sourced from @​hono/node-server's releases.

v2.0.12

What's Changed

Full Changelog: honojs/node-server@v2.0.11...v2.0.12

v2.0.11

What's Changed

Full Changelog: honojs/node-server@v2.0.10...v2.0.11

v2.0.10

Security fixes

This release includes a fix for the following security issue:

Unauthenticated memory-leak DoS via aborted WebSocket handshake

Affects: upgradeWebSocket. A WebSocket upgrade request with a missing or malformed Sec-WebSocket-Key header leaked the request's IncomingMessage and left a promise pending, even though no connection was established. Since the route is reachable pre-handshake without authentication, an attacker could flood it to gradually exhaust memory. GHSA-9mqv-5hh9-4cgg

Users of upgradeWebSocket are encouraged to upgrade to this version.

v2.0.9

What's Changed

New Contributors

Full Changelog: honojs/node-server@v2.0.8...v2.0.9

v2.0.8

What's Changed

Full Changelog: honojs/node-server@v2.0.7...v2.0.8

v2.0.7

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​hono/node-server since your current version.


Updates brace-expansion from 1.1.16 to 1.1.18

Commits

Updates @anthropic-ai/sdk from 0.82.0 to 0.115.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.115.0

0.115.0 (2026-07-24)

Full Changelog: sdk-v0.114.0...sdk-v0.115.0

Features

  • api: add claude-opus-5 model (cdd3606)
  • api: add tool addition/removal blocks and tool_change events (cdd3606)
  • api: expand client-side fallback credit token types and add server-side fallbacks default option (cdd3606)

Bug Fixes

  • client: release abort listeners when requests settle (#1129) (b85e902)

sdk: v0.114.0

0.114.0 (2026-07-23)

Full Changelog: sdk-v0.113.0...sdk-v0.114.0

Features

  • api: add new stop reason 'model_context_window_exceeded' (1ec71c1)

sdk: v0.113.0

0.113.0 (2026-07-22)

Full Changelog: sdk-v0.112.5...sdk-v0.113.0

Features

  • api: add support for Managed Agents model effort, initial session events, and threads delta streaming (83fef1e)

sdk: v0.112.5

0.112.5 (2026-07-21)

Full Changelog: sdk-v0.112.4...sdk-v0.112.5

Chores

  • api: add support for new refusal category (479efe8)
  • internal: codegen related update (830fb74)

sdk: v0.112.4

0.112.4 (2026-07-20)

Full Changelog: sdk-v0.112.3...sdk-v0.112.4

Bug Fixes

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.115.0 (2026-07-24)

Full Changelog: sdk-v0.114.0...sdk-v0.115.0

Features

  • api: add claude-opus-5 model (cdd3606)
  • api: add tool addition/removal blocks and tool_change events (cdd3606)
  • api: expand client-side fallback credit token types and add server-side fallbacks default option (cdd3606)

Bug Fixes

  • client: release abort listeners when requests settle (#1129) (b85e902)

0.114.0 (2026-07-23)

Full Changelog: sdk-v0.113.0...sdk-v0.114.0

Features

  • api: add new stop reason 'model_context_window_exceeded' (1ec71c1)

0.113.0 (2026-07-22)

Full Changelog: sdk-v0.112.5...sdk-v0.113.0

Features

  • api: add support for Managed Agents model effort, initial session events, and threads delta streaming (83fef1e)

0.112.5 (2026-07-21)

Full Changelog: sdk-v0.112.4...sdk-v0.112.5

Chores

  • api: add support for new refusal category (479efe8)
  • internal: codegen related update (830fb74)

0.112.4 (2026-07-20)

Full Changelog: sdk-v0.112.3...sdk-v0.112.4

Bug Fixes

  • aws: preserve AWS options and auth mode across withOptions() (#214) (3f7665c)

Chores

... (truncated)

Commits
  • 3b45cd3 chore: release main
  • f298e9a feat(api): add claude-opus-5 model
  • ce8e54b fix(client): release abort listeners when requests settle (#1129)
  • 2d314b4 chore: release main
  • 3d051df feat(api): add new stop reason 'model_context_window_exceeded'
  • 4414d47 chore: release main
  • 1ec5566 feat(api): add support for Managed Agents model effort, initial session event...
  • c58a55b chore: release main
  • 2fb7da5 chore(api): add support for new refusal category
  • d6ffc3c chore(internal): codegen related update
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​anthropic-ai/sdk since your current version.


Updates @hono/node-server from 1.19.14 to 2.0.12

Release notes

Sourced from @​hono/node-server's releases.

v2.0.12

What's Changed

Full Changelog: honojs/node-server@v2.0.11...v2.0.12

v2.0.11

What's Changed

Full Changelog: honojs/node-server@v2.0.10...v2.0.11

v2.0.10

Security fixes

This release includes a fix for the following security issue:

Unauthenticated memory-leak DoS via aborted WebSocket handshake

Affects: upgradeWebSocket. A WebSocket upgrade request with a missing or malformed Sec-WebSocket-Key header leaked the request's IncomingMessage and left a promise pending, even though no connection was established. Since the route is reachable pre-handshake without authentication, an attacker could flood it to gradually exhaust memory. GHSA-9mqv-5hh9-4cgg

Users of upgradeWebSocket are encouraged to upgrade to this version.

v2.0.9

What's Changed

New Contributors

Full Changelog: honojs/node-server@v2.0.8...v2.0.9

v2.0.8

What's Changed

Full Changelog: honojs/node-server@v2.0.7...v2.0.8

v2.0.7

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​hono/node-server since your current version.


Updates braces from 2.3.2 to 3.0.3

Changelog

Sourced from braces's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

  • Changelogs are for humans, not machines.
  • There should be an entry for every single version.
  • The same types of changes should be grouped.
  • Versions and sections should be linkable.
  • The latest version comes first.
  • The release date of each versions is displayed.
  • Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

  • Added for new features.
  • Changed for changes in existing functionality.
  • Deprecated for soon-to-be removed features.
  • Removed for now removed features.
  • Fixed for any bug fixes.
  • Security in case of vulnerabilities.

[3.0.0] - 2018-04-08

v3.0 is a complete refactor, resulting in a faster, smaller codebase, with fewer deps, and a more accurate parser and compiler.

Breaking Changes

  • The undocumented .makeRe method was removed
  • Require Node.js >= 8.3

Non-breaking changes

  • Caching was removed
Commits

Updates esbuild from 0.21.5 to 0.28.1

Release notes

Sourced from esbuild's releases.

v0.28.1

  • Disallow \ in local development server HTTP requests (GHSA-g7r4-m6w7-qqqr)

    This release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \ backslash character. It happened due to the use of Go's path.Clean() function, which only handles Unix-style / characters. HTTP requests with paths containing \ are no longer allowed.

    Thanks to @​dellalibera for reporting this issue.

  • Add integrity checks to the Deno API (GHSA-gv7w-rqvm-qjhr)

    The previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.

    Note that esbuild's Deno API installs from registry.npmjs.org by default, but allows the NPM_CONFIG_REGISTRY environment variable to override this with a custom package registry. This change means that the esbuild executable served by NPM_CONFIG_REGISTRY must now match the expected content.

    Thanks to @​sondt99 for reporting this issue.

  • Avoid inlining using and await using declarations (#4482)

    Previously esbuild's minifier sometimes incorrectly inlined using and await using declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for let and const declarations by avoiding doing it for var declarations, which no longer worked when more declaration types were added. Here's an example:

    // Original code
{
  using x = new Resource()
  x.activate()
}
// Old output (with --minify)
new Resource().activate();
// New output (with --minify)
{using e=new Resource;e.activate()}

  • Fix module evaluation when an error is thrown (#4461, #4467)

    If an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if import() or require() is used to import a module multiple times. The thrown error is supposed to be thrown by every call to import() or require(), not just the first. With this release, esbuild will now throw the same error every time you call import() or require() on a module that throws during its evaluation.

  • Fix some edge cases around the new operator (#4477)

    Previously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a new expression (specifically an optional chain and/or a tagged template literal). The generated code for the new target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the new target in parentheses. Here is an example of some affected code:

    // Original code
new (foo()`bar`)()
new (foo()?.bar)()
// Old output
new foo()bar();
new (foo())?.bar();

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2024

This changelog documents all esbuild versions published in the year 2024 (versions 0.19.12 through 0.24.2).

0.24.2

  • Fix regression with --define and import.meta (#4010, #4012, #4013)

    The previous change in version 0.24.1 to use a more expression-like parser for define values to allow quoted property names introduced a regression that removed the ability to use --define:import.meta=.... Even though import is normally a keyword that can't be used as an identifier, ES modules special-case the import.meta expression to behave like an identifier anyway. This change fixes the regression.

    This fix was contributed by @​sapphi-red.

0.24.1

  • Allow es2024 as a target in tsconfig.json (#4004)

    TypeScript recently added es2024 as a compilation target, so esbuild now supports this in the target field of tsconfig.json files, such as in the following configuration file:

    {
  "compilerOptions": {
    "target": "ES2024"
  }
}

    As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in the documentation.

    This fix was contributed by @​billyjanitsch.

  • Allow automatic semicolon insertion after get/set

    This change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:

    class Foo {
  get
  *x() {}
  set
  *y() {}
}

    The above code will be considered valid starting with this release. This change to esbuild follows a similar change to TypeScript which will allow this syntax starting with TypeScript 5.7.

  • Allow quoted property names in --define and --pure (#4008)

    The define and pure API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes --define and --pure consistent with --global-name, which already supported quoted property names. For example, the following is now possible:

    

    • 






... (truncated)





Commits





Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for esbuild since your current version.






Updates @anthropic-ai/sdk from 0.82.0 to 0.115.0



Release notes

Sourced from @​anthropic-ai/sdk's releases.




sdk: v0.115.0


0.115.0 (2026-07-24)


Full Changelog: sdk-v0.114.0...sdk-v0.115.0


Features


    

  • api: add claude-opus-5 model (cdd3606)
    • 

  • api: add tool addition/removal blocks and tool_change events (cdd3606)
    • 

  • api: expand client-side fallback credit token types and add server-side fallbacks default option (cdd3606)
    • 



Bug Fixes


    

  • client: release abort listeners when requests settle (#1129) (b85e902)
    • 



sdk: v0.114.0


0.114.0 (2026-07-23)


Full Changelog: sdk-v0.113.0...sdk-v0.114.0


Features


    

  • api: add new stop reason 'model_context_window_exceeded' (1ec71c1)
    • 



sdk: v0.113.0


0.113.0 (2026-07-22)


Full Changelog: sdk-v0.112.5...sdk-v0.113.0


Features


    

  • api: add support for Managed Agents model effort, initial session events, and threads delta streaming (83fef1e)
    • 



sdk: v0.112.5


0.112.5 (2026-07-21)


Full Changelog: sdk-v0.112.4...sdk-v0.112.5


Chores


    

  • api: add support for new refusal category (479efe8)
    • 

  • internal: codegen related update (830fb74)
    • 



sdk: v0.112.4


0.112.4 (2026-07-20)


Full Changelog: sdk-v0.112.3...sdk-v0.112.4


Bug Fixes





... (truncated)





Changelog

Sourced from @​anthropic-ai/sdk's changelog.




0.115.0 (2026-07-24)


Full Changelog: sdk-v0.114.0...sdk-v0.115.0


Features


    

  • api: add claude-opus-5 model (cdd3606)
    • 

  • api: add tool addition/removal blocks and tool_change events (cdd3606)
    • 

  • api: expand client-side fallback credit token types and add server-side fallbacks default option (cdd3606)
    • 



Bug Fixes


    

  • client: release abort listeners when requests settle (#1129) (b85e902)
    • 



0.114.0 (2026-07-23)


Full Changelog: sdk-v0.113.0...sdk-v0.114.0


Features


    

  • api: add new stop reason 'model_context_window_exceeded' (1ec71c1)
    • 



0.113.0 (2026-07-22)


Full Changelog: sdk-v0.112.5...sdk-v0.113.0


Features


    

  • api: add support for Managed Agents model effort, initial session events, and threads delta streaming (83fef1e)
    • 



0.112.5 (2026-07-21)


Full Changelog: sdk-v0.112.4...sdk-v0.112.5


Chores


    

  • api: add support for new refusal category (479efe8)
    • 

  • internal: codegen related update (830fb74)
    • 



0.112.4 (2026-07-20)


Full Changelog: sdk-v0.112.3...sdk-v0.112.4


Bug Fixes


    

  • aws: preserve AWS options and auth mode across withOptions() (#214) (3f7665c)
    • 



Chores





... (truncated)





Commits

    

  • 3b45cd3 chore: release main
    • 

  • f298e9a feat(api): add claude-opus-5 model
    • 

  • ce8e54b fix(client): release abort listeners when requests settle (#1129)
    • 

  • 2d314b4 chore: release main
    • 

  • 3d051df feat(api): add new stop reason 'model_context_window_exceeded'
    • 

  • 4414d47 chore: release main
    • 

  • 1ec5566 feat(api): add support for Managed Agents model effort, initial session event...
    • 

  • c58a55b chore: release main
    • 

  • 2fb7da5 chore(api): add support for new refusal category
    • 

  • d6ffc3c chore(internal): codegen related update
    • 

  • Additional commits viewable in compare view
    • 






Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​anthropic-ai/sdk since your current version.






Updates postcss from 8.5.15 to 8.5.25



Release notes

Sourced from postcss's releases.




8.5.25


    

  • Fixed 8.5.17 visitor regression.
    • 

  • Fixed list.split() for non-string values (by @​amir-rezaei).
    • 



8.5.24


    

  • Preserve the BOM after the processing (by @​hdimer).
    • 



8.5.23


    

  • Do not load source map without opts.from for security reasons.
    • 



8.5.22



8.5.21



8.5.20



8.5.19


    

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).
    • 



8.5.18


    

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).
    • 



8.5.17


    

  • Fixed Maximum call stack size exceeded error.
    • 

  • Fixed Prototype hijacking for postcss.fromJSON().
    • 

  • Fixed Input#origin() for unmapped end position (by @​chatman-media).
    • 



8.5.16



8.5.15


    

  • Fixed declaration parsing performance (by @​homanp).
    • 



8.5.14



8.5.13


    

  • Fixed postcss-scss commend regression.
    • 








Changelog

Sourced from postcss's changelog.




8.5.25


    

  • Fixed 8.5.17 visitor regression.
    • 

  • Fixed list.split() for non-string values (by @​amir-rezaei).
    • 



8.5.24


    

  • Preserve the BOM after the processing (by @​hdimer).
    • 



8.5.23


    

  • Do not load source map without opts.from for security reasons.
    • 



8.5....

Description has been truncated

    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
        

  

      

  
  

  
          

  

    

      


  

        
          @dependabot
  




      

        
          Bump the npm_and_yarn group across 10 directories with 8 updates
        

          
                        
      


      

        

    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          3bdc2db
        
      

    

  

    

      
Bumps the npm_and_yarn group with 1 update in the /build/agent-sdk/agents/claude directory: [@hono/node-server](https://github.com/honojs/node-server).
Bumps the npm_and_yarn group with 1 update in the /test/monaco directory: [postcss](https://github.com/postcss/postcss).
Bumps the npm_and_yarn group with 1 update in the /test/mcp directory: [@hono/node-server](https://github.com/honojs/node-server).
Bumps the npm_and_yarn group with 1 update in the /test/integration/browser directory: [brace-expansion](https://github.com/juliangruber/brace-expansion).
Bumps the npm_and_yarn group with 3 updates in the / directory: [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript), [@hono/node-server](https://github.com/honojs/node-server) and [braces](https://github.com/micromatch/braces).
Bumps the npm_and_yarn group with 1 update in the /extensions/copilot/test/simulation/fixtures/generate/issue-6163 directory: [esbuild](https://github.com/evanw/esbuild).
Bumps the npm_and_yarn group with 3 updates in the /extensions/copilot directory: [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript), [postcss](https://github.com/postcss/postcss) and [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js).
Bumps the npm_and_yarn group with 2 updates in the /extensions/copilot/chat-lib directory: [postcss](https://github.com/postcss/postcss) and [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js).
Bumps the npm_and_yarn group with 1 update in the /build/vite directory: [postcss](https://github.com/postcss/postcss).
Bumps the npm_and_yarn group with 2 updates in the /build/npm/gyp directory: [ip-address](https://github.com/beaugunderson/ip-address) and [brace-expansion](https://github.com/juliangruber/brace-expansion).


Updates `@hono/node-server` from 1.19.14 to 2.0.12
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v1.19.14...v2.0.12)

Updates `postcss` from 8.5.12 to 8.5.25
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.12...8.5.25)

Updates `@hono/node-server` from 1.19.14 to 2.0.12
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v1.19.14...v2.0.12)

Updates `brace-expansion` from 1.1.16 to 1.1.18
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/commits)

Updates `@anthropic-ai/sdk` from 0.82.0 to 0.115.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.82.0...sdk-v0.115.0)

Updates `@hono/node-server` from 1.19.14 to 2.0.12
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v1.19.14...v2.0.12)

Updates `braces` from 2.3.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/commits/3.0.3)

Updates `esbuild` from 0.21.5 to 0.28.1
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md)
- [Commits](evanw/esbuild@v0.21.5...v0.28.1)

Updates `@anthropic-ai/sdk` from 0.82.0 to 0.115.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.82.0...sdk-v0.115.0)

Updates `postcss` from 8.5.15 to 8.5.25
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.12...8.5.25)

Updates `@opentelemetry/core` from 1.30.1 to 2.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.30.1...v2.10.0)

Updates `postcss` from 8.5.15 to 8.5.25
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.12...8.5.25)

Updates `@opentelemetry/core` from 1.30.1 to 2.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.30.1...v2.10.0)

Updates `postcss` from 8.5.14 to 8.5.25
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.12...8.5.25)

Updates `ip-address` from 9.0.5 to 10.4.0
- [Release notes](https://github.com/beaugunderson/ip-address/releases)
- [Commits](beaugunderson/ip-address@v9.0.5...v10.4.0)

Updates `brace-expansion` from 2.1.2 to 2.1.4
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/commits)

---
updated-dependencies:
- dependency-name: "@hono/node-server"
  dependency-version: 2.0.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: postcss
  dependency-version: 8.5.25
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@hono/node-server"
  dependency-version: 2.0.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: brace-expansion
  dependency-version: 1.1.18
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.115.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@hono/node-server"
  dependency-version: 2.0.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-version: 3.0.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: esbuild
  dependency-version: 0.28.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.115.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: postcss
  dependency-version: 8.5.25
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@opentelemetry/core"
  dependency-version: 2.10.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: postcss
  dependency-version: 8.5.25
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@opentelemetry/core"
  dependency-version: 2.10.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: postcss
  dependency-version: 8.5.25
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ip-address
  dependency-version: 10.4.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: brace-expansion
  dependency-version: 2.1.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



            added
      

  dependencies

  Pull requests that update a dependency file

      

  javascript

  Pull requests that update javascript code

  labels


      Aug 1, 2026

    

  












  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










      

  

    
    

    

  

    Reviewers
  


    

    No reviews





  




    

  


      
  

    Assignees
  



        


    No one assigned







      


  


  

    Labels
  



    

      

    dependencies

  Pull requests that update a dependency file
  

    javascript

  Pull requests that update javascript code








      

  

    

        

    Projects
  


        




    None yet




  



      


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            


Successfully merging this pull request may close these issues.





  
  



      
    

  




      

    

  
        

  

    

      0 participants